Katalog CVE (hal. 682)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.211 (Critical 36.541 · High 105.926 · KEV 1.762 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.051–34.100 dari 265.211 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-75080 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_subject1....	7.3 High	—	0,43%	18 Agt 2026
CVE-2026-75079 A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_subject2.php. Executing...	7.3 High	—	0,43%	18 Agt 2026
CVE-2026-9693 mattermost server Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows...	3.5 Low	—	0,27%	17 Agt 2026
CVE-2026-75587 mattermost desktop Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user...	3.3 Low	—	0,13%	17 Agt 2026
CVE-2026-75078 A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulati...	4.3 Medium	—	0,47%	17 Agt 2026
CVE-2026-67961 An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.	7.8 High	—	0,19%	17 Agt 2026
CVE-2026-67919 An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory...	9.8 Critical	—	0,93%	17 Agt 2026
CVE-2026-42164 Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up con...	9.8 Critical	—	0,55%	17 Agt 2026
CVE-2026-42162 Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipul...	9.1 Critical	—	0,54%	17 Agt 2026
CVE-2026-38165 A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary c...	9.8 Critical	—	0,87%	17 Agt 2026
CVE-2026-9859 mattermost server Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which...	6.5 Medium	—	0,34%	17 Agt 2026
CVE-2026-9816 mattermost server Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields server-side on insert and archive-import paths whi...	8.3 High	—	0,35%	17 Agt 2026
CVE-2026-75077 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such...	4.3 Medium	—	0,47%	17 Agt 2026
CVE-2026-71424 Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another...	9.6 Critical	—	0,49%	17 Agt 2026
CVE-2026-69148 MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run_id or m...	7.1 High	—	0,37%	17 Agt 2026
CVE-2026-69146 MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE...	6.5 Medium	—	0,39%	17 Agt 2026
CVE-2026-67960 An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php,...	9.8 Critical	—	0,73%	17 Agt 2026
CVE-2026-67918 Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download...	7.5 High	—	1,4%	17 Agt 2026
CVE-2026-67868 A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote atta...	9.8 Critical	—	1,1%	17 Agt 2026
CVE-2026-67854 SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code	9.8 Critical	—	0,71%	17 Agt 2026
CVE-2026-65351 apple safari, apple ipados +2 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65349 apple ipados, apple iphone os +1 lainnya An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27,...	6.6 Medium	—	0,15%	17 Agt 2026
CVE-2026-65347 apple ipados, apple iphone os +1 lainnya The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an ima...	6.5 Medium	—	0,42%	17 Agt 2026
CVE-2026-65346 apple ipados, apple iphone os +1 lainnya An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, vi...	8.8 High	—	0,59%	17 Agt 2026
CVE-2026-65343 apple ipados, apple iphone os +1 lainnya A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watch...	7.5 High	—	0,69%	17 Agt 2026
CVE-2026-65341 apple safari, apple ipados +2 lainnya The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26....	5.4 Medium	—	0,25%	17 Agt 2026
CVE-2026-65340 apple safari, apple ipados +2 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65339 apple ipados, apple iphone os +1 lainnya A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26....	5.0 Medium	—	0,15%	17 Agt 2026
CVE-2026-65338 apple safari, apple ipados +2 lainnya The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26....	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65337 apple safari, apple ipados +2 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65336 apple ipados, apple iphone os +1 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65335 apple ipados, apple iphone os +1 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65334 apple safari, apple ipados +2 lainnya A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65333 apple ipados, apple iphone os +1 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65332 apple safari, apple ipados +2 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,46%	17 Agt 2026
CVE-2026-65331 apple safari, apple ipados +2 lainnya This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...	4.3 Medium	—	0,65%	17 Agt 2026
CVE-2026-65330 apple ipados, apple iphone os +1 lainnya The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27,...	6.5 Medium	—	0,45%	17 Agt 2026
CVE-2026-65329 apple ipados, apple iphone os An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileg...	5.9 Medium	—	0,24%	17 Agt 2026
CVE-2026-64849 Advisory lfprojects mlflow MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticate...	9.3 Critical	KEV	10,0%	17 Agt 2026
CVE-2026-64788 apple ipados, apple iphone os +1 lainnya The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27, watchOS 27. Processing malici...	5.4 Medium	—	0,25%	17 Agt 2026
CVE-2026-64787 apple safari, apple ipados +2 lainnya A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...	6.5 Medium	—	0,33%	17 Agt 2026
CVE-2026-64784 apple safari, apple ipados +2 lainnya An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26....	4.3 Medium	—	0,58%	17 Agt 2026
CVE-2026-64782 apple safari, apple ipados +2 lainnya A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...	3.1 Low	—	0,43%	17 Agt 2026
CVE-2026-64781 apple ipados, apple iphone os +1 lainnya The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26...	4.3 Medium	—	0,53%	17 Agt 2026
CVE-2026-64780 apple ipados, apple iphone os +1 lainnya The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visi...	4.3 Medium	—	0,63%	17 Agt 2026
CVE-2026-64779 apple ipados, apple iphone os +1 lainnya A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...	3.1 Low	—	0,38%	17 Agt 2026
CVE-2026-64778 apple safari, apple ipados +2 lainnya The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS...	6.5 Medium	—	0,34%	17 Agt 2026
CVE-2026-64760 apple ipados, apple iphone os An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 2...	5.5 Medium	—	0,16%	17 Agt 2026
CVE-2026-64715 apple safari, apple ipados +2 lainnya A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...	6.5 Medium	—	0,47%	17 Agt 2026
CVE-2026-63178 Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group...	6.5 Medium	—	0,52%	17 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.